Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/danjdewhurst/hcloud-skills/hcloud-setupnpx skills add danjdewhurst/hcloud-skills --skill hcloud-setupgit clone --depth 1 https://github.com/danjdewhurst/hcloud-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/danjdewhurst/hcloud-skills/hcloud-setup)<a href="https://agentmods.dev/skills/danjdewhurst/hcloud-skills/hcloud-setup"><img src="https://agentmods.dev/badge/skills/danjdewhurst/hcloud-skills/hcloud-setup.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00042 | $0.02372 |
| Opus 5 | $0.00021 | $0.01186 |
| Sonnet 5 | $0.00008 | $0.00474 |
| Haiku 4.5 | $0.00004 | $0.00237 |
Grade B, and why
hcloud-setup scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
sudo tar -C /usr/local/bin --no-same-owner -xzf hcloud-linux-amd64.tar.gz hcloud Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -sSLO https://github.com/hetznercloud/cli/releases/latest/download/hcloud-linux-amd64.tar.gz How it starts
The opening of the file, as written. The whole thing — 393 lines — stays where its author put it; the contents beside it link to each section on GitHub.
hcloud CLI Setup and Configuration
Installation
Manual (GitHub Releases)
Download pre-built binaries from GitHub releases. Extract and move the binary to a directory in your PATH.
Example for 64-bit Linux:
curl -sSLO https://github.com/hetznercloud/cli/releases/latest/download/hcloud-linux-amd64.tar.gz
sudo tar -C /usr/local/bin --no-same-owner -xzf hcloud-linux-amd64.tar.gz hcloud
rm hcloud-linux-amd64.tar.gz
Go
go install github.com/hetznercloud/cli/cmd/hcloud@latest
Note: Binaries built with Go will not have the correct version embedded.
Homebrew (Linux / macOS)
brew install hcloud
Windows
WinGet:
winget install HetznerCloud.CLI
Scoop:
scoop install hcloud
Note: The WinGet and Scoop package entries are not maintained by Hetzner.
Docker
docker run --rm -e HCLOUD_TOKEN="<token>" hetznercloud/cli:latest <command>
To persist configuration, mount the config file:
docker run --rm -v ~/.config/hcloud/cli.toml:/config.toml hetznercloud/cli:latest <command>
Interactive shell:
docker run -it --rm --entrypoint /bin/sh hetznercloud/cli:latest
Debian-based distributions (using apt) provide outdated versions of the hcloud CLI. Use one of the other installation methods instead.
Shell Completion
Bash
Load into current shell:
source <(hcloud completion bash)
Make permanent by adding the line above to ~/.bashrc.
Zsh
Generate the completion file:
mkdir -p ~/.config/hcloud/completion/zsh
hcloud completion zsh > ~/.config/hcloud/completion/zsh/_hcloud
Add to ~/.zshrc (the fpath line must come before compinit):
fpath+=(~/.config/hcloud/completion/zsh)
# ... anything else that needs to be done before compinit
autoload -Uz compinit; compinit
Restart the shell for changes to take effect.
Fish
Permanent installation:
hcloud completion fish > ~/.config/fish/completions/hcloud.fish
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 393 lines · 42 tokens per session scan B 73c3fafce3e8
hcloud-setup is a skill published in the GitHub repository danjdewhurst/hcloud-skills (3 stars, last pushed 6mo ago), licensed MIT. It adds 42 tokens to every session and 2,372 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it B with 2 findings (asks for root, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
deploy-site
Deploys an existing Power Pages code site to a Power Pages environment using PAC CLI. Handles tooling verification, authentication, environment confirmation, building, and uploading. Use when the user wants to deploy, upload, or publish their code site.
activate-site
Activates and provisions a Power Pages website in a Power Platform environment via the Power Platform REST API. Use when the user wants to activate, provision, turn on, or enable a Power Pages website or portal.
deploy
Builds and deploys a Power Apps code app to Power Platform. Use when deploying changes, redeploying an existing app, or pushing updates.
deploy-to-connect
Deploy or publish Python and R content to a Posit Connect server using rsconnect-python or the R rsconnect package. Handles interactive apps and dashboards, web APIs, rendered documents, and prepared bundles/manifests. Use whenever the user asks to deploy, publish, or redeploy content to Posit Connect, or mentions…
cloudflare-cron-triggers
Cloudflare Cron Triggers for scheduled Workers execution. Use for periodic tasks, scheduled jobs, or encountering handler not found, invalid cron expression, timezone errors.
cloudflare-nextjs
Deploy Next.js to Cloudflare Workers via the OpenNext adapter (@opennextjs/cloudflare). Use for SSR/ISR/SSG/App or Pages Router, getCloudflareContext, bindings (D1/R2/KV/AI/Hyperdrive), caching tiers, skew protection, multi-worker, custom worker, env vars, or worker…